Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
Description
Sonatype Nexus 3.22+, and probably other docker registry solutions, now serves manifest lists.
https://issues.sonatype.org/browse/NEXUS-18546
Apache Mesos does not support yet this part of the Image Manifest V2S2 spec.
https://docs.docker.com/registry/spec/manifest-v2-2/#manifest-list
This is not a critical issue as Sonatype Nexus is not a dependency of Apache Mesos, but as we cannot use Nexus > 3.21.2, this leads to side security issues.
https://support.sonatype.com/hc/en-us/articles/360046233714
Apache Mesos should support the whole Image Manifest V2S2 specification.